Endpoint Verification collects device attributes from the machines accessing your organization’s resources and makes them available for context-aware access decisions.
What Is Endpoint Verification?
Endpoint Verification lets security administrators and security operations professionals secure Google Cloud, on-premises apps and resources, and Google Workspace apps. The service is part of Google Cloud Chrome Enterprise Premium.
Technically, Endpoint Verification consists of a Chrome extension that collects and reports device inventory information by constantly syncing with Google Cloud. This creates an inventory of devices with Chrome browser that access your organization’s data. As an administrator you can review device information including encryption status and OS and use it to manage access control.
Core Features
- Device inventory: Automatic inventory of the devices that access organizational resources
- Attribute collection: Collection of device attributes including encryption status and operating system
- Constant syncing: The extension continuously syncs device information with Google Cloud
- Access Context Manager integration: Collected attributes serve as the basis for access levels
- Third-party integration: Ingests real-time device information from clients such as CrowdStrike and Microsoft Intune
Typical Use Cases
Overview of Endpoint Security Posture
Get an overview of the security posture of the devices used to access your organization’s resources, such as laptops and desktops.
Access Control for Mixed Device Fleets
Employees access organizational resources from both company-owned devices and unmanaged personal devices. Endpoint Verification collects and reports device inventory information that you can use to manage secure access.
Fine-Grained Access Decisions
When paired with the other offerings of Chrome Enterprise Premium, Endpoint Verification helps enforce fine-grained access control on your Google Cloud resources.
Benefits
- Visibility without a separate inventory system: The device inventory is built directly from the accessing endpoints
- Foundation for context-aware access: Attributes are used directly in Access Context Manager access levels
- Open to existing endpoint tooling: Ingests device information from third-party clients
- Broad entitlement: Available to Google Cloud, Cloud Identity, and Google Workspace Business and Enterprise customers
Integration with innFactory
As a certified Google Cloud partner, innFactory supports you with Endpoint Verification: rolling out the extension, defining access levels in Access Context Manager, and connecting existing endpoint management systems.
Typical Use Cases
Technical Specifications
Frequently Asked Questions
What is Endpoint Verification?
According to Google's documentation, Endpoint Verification is a Chrome extension that gathers attributes about the device it is installed on. From these attributes it creates an inventory of devices with Chrome browser that access your organization's data.
Who can use Endpoint Verification?
Endpoint Verification is part of Google Cloud Chrome Enterprise Premium and, per the documentation, is available to all Google Cloud, Cloud Identity, Google Workspace for Business, and Google Workspace for Enterprise customers.
How does Endpoint Verification work with Access Context Manager?
Access Context Manager is also part of Google Cloud Chrome Enterprise Premium and lets administrators define fine-grained, attribute-based access control for projects and resources in Google Cloud and resources in Google Workspace. Access Context Manager references the device attributes collected by Endpoint Verification to enforce access levels.
Can third-party solutions be integrated?
Yes. In Chrome Enterprise Premium third-party client integrations, clients such as CrowdStrike and Microsoft Intune collect real-time device information. Endpoint Verification communicates with these clients to collect their device information and makes it available to Access Context Manager.
Which devices does Endpoint Verification cover?
Per the documentation, Endpoint Verification targets devices such as laptops and desktops that access your organization's resources. It covers both company-owned devices and unmanaged personal devices where the extension is installed.
Note: All product information on this page has been compiled with care, but is provided without guarantee and may be outdated or incomplete. Cloud services evolve rapidly — features, pricing, SLAs, and availability change frequently. Authoritative and up-to-date information can only be found on the official product page of Google Cloud (official documentation). This page does not represent an offer by Google Cloud.
